CVE-2022-29915: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox < 100.

Affected products

• Mozilla Firefox: before 100.0 (fixed in 100.0)

Published 2022-12-22. Last modified 2026-06-17.